Setting up pfSense as VM on Proxmox | NGFW Tutorial 2024

now we have already seen that our network is ready but we need to have a virtual machine which will work as our firewall or unified threat management system a DNS server or DHCP server which we can manage easily that will be a software based firewall DCP server we'll create the virtual machine here and we'll install PF sense so we'll be downloading PF sens it needs only 500 MHz of CPU and 512 MB of RAM I'll be going for 1 GHz and RAM is 1 GB I'll be going here to the download AMD architecture 64 bit and installer will be DVD image this Frankfort is nearest to me and download let us wait for this download to complete all right so here you can see that 548 MB of the file is downloaded here so I'll be uploading this PF sense I image to proxmox Virtual environment I'll go here to ISO upload the iso image locate the path here and it will be BF sense. ISO all right so you can see here that the iso imagees uploaded now which is PF sense. ISO can create the VM so there are two nodes available right now I'll be creating in my PVE node because it has got the two network interface cards the other one is not having two you can see here that PV E2 this has only one network card here so this is zma blade so zma blade has only one network interface card and the zma board has two network interface cards so I'll be using one for the van and one for the Lan that's why I'm using PVE one I'll go here create the VM in the PVE node its name will be pfSense use CD dis image and disk image is already here ISO image Linux kernel 2.6 which is fine and here is the system configuration I'll be choosing this also as a default and then diss so 8GB is more than enough cuz this is for the home lab so I'll be going for 16 GB CPU One Core for this particular VM memory it shows me 2048 so 1 GB Ram is enough and right now it is showing vmbr0 I need to of course add two Network switches here so I'll just show you that also so right now you can see here that machine 100 is created go here to the hardware you can see here that only one network is there vmbr0 I'll be adding one more Network here add Network device and this will be with vmb 1 now my PF sense has two virtual network cards connected to physical network cards one is connected to the van and another is connected to the Lan so zero will be used as when one will be used as Lan CD is also connected and network is also defined hard disk is also available so I'll be just going back here and starting this console pfSense has started so we'll be just installing the pfSense on the local machine machine now accept the license agreement and install I'll just install it and auto ZFS it will automatically choose the dis partition so I'll be using this and install with no redundancy this is fine virtual disk I'll be choosing virtual disk okay and it will destroy all the partition I agree to it yes and now we'll wait for this process to complete all right so installation is completed and I'll be just rebooting the server here and here I can go back to the machine here from the hardware I can remove this ISO file now it has been installed so I'll be removing it so I'll be going back here PF sense has started directly on the hard this now you can see here vet zero and vet 1 this is what we were doing earlier so here you can see here that I am right now connected on this particular network with p F sense I'll be connecting vmbr0 which will be having the IP address of 192168 100.4 or it can directly also get from the DHCP it will be getting 100. something and then I'll be changing it of course to 100.4 it shows that enter the van interface so my van should be Net Zero which is vmbr0 and net one is vmb one and here also if I go back to PVE Network and my vmb R 0 is having the IP address of 100 range and this 2402 is my internal vmbr0 is my external network VT net 0 is my van interface and the Lan interface will be of course VT net 1 so here you can see van is now vtin at zero Lan is vtin at one I'll proceed yes now it will start configuring the network I'll just show you in the diagram so we were saying that it will get the IP address automatically which is 192.168 100. something you can see here that van IP is 1921 16800 224 and the Lan IP is 19216811 if I see my IP address in my computer right now so right now my IP address is 192168 31.1 162 I'll be disabling the DHCP server here in my existing Network you can see here I'm disconnected right now so I'll be using ip config SL renew IP address that I got is 1.1 so now I can access the PF sense from here which is 192.168.1.1 the default user is admin and password is pfSense for my network which I'm here right now and I'm accessing the internet via my vm1 which is connected to pfSense and through pfSense van Port I'm able to access this network also and I'm also able to access this particular switch also which is vmbr0 at 192168 100.2 you can see here that this is 100.2 I can still access it because for my network it is right now internet and I'll be able to access it of course but I won't be able to access my Wi-Fi access point because its IP address is in a different range but that is working as a switch and as a Wi-Fi access point it is fine PF sense has started I'll just simply accept the license agreement so I'll be just changing the system manager password Here save it so I'll be going here to interface you can see here in Van interface as I mentioned instead of DHCP I'll be using the static ipv4 address and my ipv4 address will be 192.168 100.4 24bit save I'll be applying the configuration now press enter so it will show me the new IP address here you can see here 19216 800.4 now I need to change the internal Lan address also which is 192.168.1.1 so I should be changing it to 2401 so I'll be going back here to the interfaces Lan interface and here I'll be changing it instead of 1.1 I'll be changing it to 2401 and here one more thing is that don't forget to adjust the DHCP server range also so I need to go back here to the services DHCP server here I need to change the DHCP server range which will be 2401 so address pool range will be 240. 100 till 240. 1999 and I'll save this also and now I can apply the changes here so we'll be waiting for the service to be restarted van address is 1921 16800 .4 and Lan address is 192168 2401 and this is what we wanted to have 192168 24102 this is the IP address that is head gotot pfSense 2401 and here in the Lan address I get the 2401 and in the DHCP server you can see here the range is 240.000 till 2401 199 DHCP is working fine my PF sense is working fine it is giving the IP addresses let's move to the another section and then we'll see the advanced networking in proxmox

Channel: syncbricks

Views: 7,850

Keywords: pfsense, proxmox, network security, pfSense router, pfSense download, pfSense hardware, pfSense plus, pfSense iso, pfSense login, pfSense documentation, proxmox sdn tutorial, Proxmox pfSense 2023, pfSense tutorial, pfSense review, pfSense reddit, pfSense lxc, pfSense single nic, pfSense 2 nics, how to setup pfSense proxmox, Proxmox reddit, Proxmox download, Proxmox lxc, Proxmox pfSense dns, Proxmox pfSense internal network, pfsense firewall, pfsense setup, pfsense router

Id: H2N8D2xFQVs

Length: 9min 13sec (553 seconds)

Published: Sun Dec 17 2023